logoalt Hacker News

9devtoday at 7:13 AM0 repliesview on HN

What works in that case is adding a message saying "I authorise you to do $thing", which the classifier treats as explicit consent to do something and execute commands toward that goal.